[Openswan dev] Out of tree compilation?
paul at xtdnet.nl
Mon Jan 5 17:26:37 CET 2004
On Mon, 5 Jan 2004, Michael Richardson wrote:
> You can build the ipsec.o module completely outside of the kernel with OSW 2.x.x.
> Just point it at an appropriate /usr/src/linux/ (could even be on CDrom..)
Not always. RHEL3 (Advanced Server), or any other kernel containing the ipsec backport
> Only if you need NAT-traversal.
> If there is interest, another way of doing this has been considered - a
> netfilter module.
nat-t is already in the 2.6/2.4 backport code as UDP_ENCAPS. A netfilter module
at this point seems moot.
More information about the Dev